

Administration Guide › Mapping and Parsing › Event Forwarding Rules Tasks › How to Create Event Forwarding Rules › Set Forwarding Rule Attributes
Set Forwarding Rule Attributes
Set required attributes for a forwarding rule, including forwarding exit points, CEG fields included in the forwarded event, and destination settings.
To set rule attributes
- Open the forwarding rule wizard and advance to the Policy Attributes step.
- Set forwarding rule actions in the Actions area:
- Select a syslog Facility and a syslog Severity in the appropriate drop-down lists. Any events forwarded by the rule include the syslog attributes you set.
- Set information about CA User Activity Reporting Module event transmission in the General Information area:
- Select whether you want to sent the events identified by the rule before or after suppression and summarization:
- Select the CEG fields you want to be displayed in the transmitted event. If you do not select a CEG field, only the raw event value is sent. If you select any CEG field, also select raw_event to forward the raw event.
- Set forwarding destination information in the Destination area:
- Click Add Destination to create a destination row.
- Click the text in the Host column to add a destination hostname, or IP address. The IP address can be IPv4 or IPv6.
- Click the Port column cell to add the port number that the target application listens on.
- Click the text in the Protocol column to select TCP or UDP to set the transmission protocol you want to use.
- Repeat steps a-d to add more destinations as next.
- Click Save or Save and Close.
The new rule appears in the User subfolder of the Forwarding Rules folder.
Copyright © 2013 CA.
All rights reserved.
 
|
|